File	Date	Author	Commit
.deps	2013-03-21	root	[bc808a] Initial commit
autom4te.cache	2013-03-21	root	[bc808a] Initial commit
debian	2013-03-21	root	[bc808a] Initial commit
linux	2013-03-21	root	[bc808a] Initial commit
AUTHORS	2013-03-21	root	[bc808a] Initial commit
COPYRIGHT	2013-03-21	root	[bc808a] Initial commit
CREDITS	2013-03-21	root	[bc808a] Initial commit
ChangeLog	2013-03-21	root	[bc808a] Initial commit
DoOne.sh	2013-03-21	root	[bc808a] Initial commit
INSTALL	2013-03-21	root	[bc808a] Initial commit
Makefile	2013-03-21	root	[bc808a] Initial commit
Makefile.am	2013-03-21	root	[bc808a] Initial commit
Makefile.in	2013-03-21	root	[bc808a] Initial commit
NEWS	2013-03-21	root	[bc808a] Initial commit
README	2013-03-21	root	[bc808a] Initial commit
README-CVS	2013-03-21	root	[bc808a] Initial commit
README-linux	2013-03-21	root	[bc808a] Initial commit
RunFF.sh	2013-03-21	root	[bc808a] Initial commit
RunFireFox.sh	2013-03-21	root	[bc808a] Initial commit
TODO	2013-03-21	root	[bc808a] Initial commit
acinclude.m4	2013-03-21	root	[bc808a] Initial commit
aclocal.m4	2013-03-21	root	[bc808a] Initial commit
all.c	2013-03-21	root	[bc808a] Initial commit
autoscan.log	2013-03-21	root	[bc808a] Initial commit
config.guess	2013-03-21	root	[bc808a] Initial commit
config.h	2013-03-21	root	[bc808a] Initial commit
config.h.in	2013-03-21	root	[bc808a] Initial commit
config.h.in~	2013-03-21	root	[bc808a] Initial commit
config.log	2013-03-21	root	[bc808a] Initial commit
config.status	2013-03-21	root	[bc808a] Initial commit
config.sub	2013-03-21	root	[bc808a] Initial commit
configure	2013-03-21	root	[bc808a] Initial commit
configure.ac	2013-03-21	root	[bc808a] Initial commit
configure.scan	2013-03-21	root	[bc808a] Initial commit
count.c	2013-03-21	root	[bc808a] Initial commit
defs.h	2013-03-21	root	[bc808a] Initial commit
depcomp	2013-03-21	root	[bc808a] Initial commit
errnoent.sh	2013-03-21	root	[bc808a] Initial commit
firefox.csv	2013-03-21	root	[bc808a] Initial commit
install-sh	2013-03-21	root	[bc808a] Initial commit
io.c	2013-03-21	root	[bc808a] Initial commit
ioctl.c	2013-03-21	root	[bc808a] Initial commit
ioctlsort.c	2013-03-21	root	[bc808a] Initial commit
iperf	2013-03-21	root	[bc808a] Initial commit
missing	2013-03-21	root	[bc808a] Initial commit
mkinstalldirs	2013-03-21	root	[bc808a] Initial commit
net.c	2013-03-21	root	[bc808a] Initial commit
net.h	2013-03-21	root	[bc808a] Initial commit
netper.csv	2013-03-21	root	[bc808a] Initial commit
netsar-graph	2013-03-21	root	[bc808a] Initial commit
netsar.1	2017-04-02	jpd@gibsonsg.com	[531cf5] fix -C option.
netsar.c	2017-04-02	jpd@gibsonsg.com	[531cf5] fix -C option.
netsar.doc	2013-03-21	root	[bc808a] Initial commit
netsar.spec	2013-03-21	root	[bc808a] Initial commit
netsar.txt	2013-03-21	root	[bc808a] Initial commit
process.c	2013-03-21	root	[bc808a] Initial commit
sock.c	2013-03-21	root	[bc808a] Initial commit
stamp-h1	2013-03-21	root	[bc808a] Initial commit
syscall.c	2013-03-21	root	[bc808a] Initial commit
syscallent.sh	2013-03-21	root	[bc808a] Initial commit
testtypes.c	2013-03-21	root	[bc808a] Initial commit
util.c	2013-03-21	root	[bc808a] Initial commit
xlate.el	2013-03-21	root	[bc808a] Initial commit

Read Me

3/20/2013
John Donnelly


This is netsar 1.0, a system call tracer for 
reporting network activity at the syscall level per-process.


Simple startup:

netsar -f  -n 1024 -C -o firefox.csv `which firefox`


records network statistics to csv file to import as a spread sheet (to graph).

To observe network statistics live,  leave off the "-C -o" options,
and a summary of network activity will be reported every time a 
network endpoint is closed to stdout:

5:42:20: Fhandle 109, FHFlags: Socket, Pid 10022, Task firefox
	Syscalls: Socket: 1, Bind: 0, Connect: 1, Accept: 0 Listen:  0
	Syscalls: Send: 0, Sendto 3, Sendmsg: 0, Recv: 5, Recvmsg: 0 
	TCP Total Sent: 1314, Small 3, Med 0, Large 0, Jumbo 0.
	TCP Total Recv: 39859, Small 0, Med 1, Large 0, Jumbo 4.
			 TCP Transfer sizes 
			Sent		 Recv
	      512: 	       3 	       0 
	     2048: 	       0 	       1 
	     8196: 	       0 	       2 
	    16384: 	       0 	       2 

 This summary shows socket w/ FH 108 sent 1314 bytes, received 39859 bytes,
 in the sizes noted.



When netsar is terminated ( or the trace program terminates ) a
summary is printed:


   syscall     calls  usecs/call   seconds   % time    errors
------------ --------- ----------- --------- -------- ---------
    recvfrom     50372           1    0.045833   52.78     40264
      writev     10295           2    0.016094   18.53          
       write      4811           3    0.013195   15.19          
        read      5579           1    0.008268    9.52          
       close       248           5    0.001189    1.37          
      sendto       315           3    0.001025    1.18          
     connect       217           4    0.000938    1.08        94
 getsockname       302           0    0.000133    0.15          
      socket       144           0    0.000056    0.06          
  setsockopt        95           0    0.000041    0.05          
     recvmsg        57           1    0.000034    0.04          
  getsockopt        84           0    0.000034    0.04          
        bind        19           0    0.000000    0.00          
------------ --------- ----------- --------- -------- ---------